title: AntiForgeryToken validation Asp.Net MVC 3
body: <p>How AntiForgeryToken gets invalidated? I have set up this token to prevent CSRF attacks on my login page and have inspected it with fiddler. When i call GET method the token generates as hidden field <strong>__RequestVerificationToken</strong>. When i post login data should this token be changed on next GET call? I catch with fiddler this value with post data and reissue/replay request and this works. Is this good behavior, or this replay should not happen because token value should not be valid after i leave that form.</p>
  
  <p>Thanks in advance.</p>