Per session token

This can then be used to "namespace" elements on a per-form basis - as with current screenshots behaviour, we can make action tokens and other attributes per-form rather than per-session.
Can we be a little more exact here? Like, "Please try posting again in X minutes."