Per session token

This can then be used to "namespace" elements on a per-form basis - as with current screenshots behaviour, we can make action tokens and other attributes per-form rather than per-session.
So does the throttling only apply to ghosted users?