the problem only came to me when i had multiple post requests queued up due my internet connection being up and down, and then only one of them having a valid t

the problem only came to me when i had multiple post requests queued up due my internet connection being up and down, and then only one of them having a valid token (as that one, regenerated the token and invalidated the requests after) and yes, im doing along with https of course, to prevent cookie theft. locking the cookie to the IP is/will be an option in user settings. decided to leave it as an option as for say mobile devices that could get very annoying if it was forced.