Disable CSRF Token Reuse

### Prerequisites

- [X] I have written a descriptive issue title
- [X] I have searched existing issues to ensure the issue has not already been raised

### Issue

Thanks for this great plug in.

I have one concern. Save CSRF token I can use multiple time for the verification. Is there any option where I can make sure that token is used only once.

The payload names no file or test. Start by tracing the plugin's token generation and verification behavior and reviewing how configuration is exposed; clarify replay handling and expected tests before implementing single-use tokens. Done means a token is accepted once and rejected on a subsequent verification.

Written by the indexing model from the issue text.