hi....
I found the following methods in Action.java which I think may help to control the session ID. That means if the user submits the page and press the back button and submit the page again it will throw an error.

generateToken(HttpServletRequest request)
saveToken(HttpServletRequest request)
isTokenValid(HttpServletRequest request)

But even if I load my jsp page for the 1st time and submit the form it is forwarded to the error page,without pressing the back button on the browser.
Am I missing something...
please help me.....in debugging this error.
My code sample in the LoginAction is as follows :
generateToken(request);
saveToken(request);
if(isTokenValid(req)) {
resetToken(req);
} // end of isTokenTrue
else
{
err.add(ActionErrors.GLOBAL_ERROR,new ActionError("function.text"));
saveErrors(req,err);
return mapping.findForward("multiple_submit_err");
}

Thanks in advance,
Abhishek