title: How to handle form with expired token auto filled by browser?
body: <p>My brand new oop-mvc-prg-token login form redirects after post. If you hit the back button the browser displays the form with autofilled values. On submit the front controller detects the stale form, displays a message like "Form not valid anymore" and the form with empty fields.</p>
  
  <p>Is thats the way its supposed to be? Maybe its ok regarding prg but I'm not happy with the user experience. The Browser (even IE) should not autofill the form. Is the only solution randomizing field names?</p>
  
  <p>How is the best pattern to handle the expired form?</p>