- Call saveToken(request) in your Action class
- Forward to the JSP displaying the form.
- Have the Action check if isTokenValid(request)
- If true, process request then call resetToken(); otherwise, we're dealing with a double-submit and will skip processing it.