Explained how to prevent replay attacks using the passed in token.