Hi Ron
Thanks for the info, I did have the stage as part of my debug log, but somehow I posted old screenshots.
The stage stays the same.
Something is triggering the form to be requested twice.
Between the devtools log and chatgpt, it's pointing at 2 requests
GET page
↓
generate sessionStorage.id
↓
GET /NewTabID
↓
set temporary x-TabID cookie
↓
location.reload()
↓
GET page again
One of the differences
SESSIONID=MrlXGbhPPdH9e4WrF5aRVl3dZUIvvp; x-TabID=4iunbrgg
and
Cookie: SESSIONID=MrlXGbhPPdH9e4WrF5aRVl3dZUIvvp
Still trying to understand why,
but the main goal is to somewhere in the init of the form have code that should only execute once.
So looking to check what to test and how to test.
In this case, a password reset link was emailed,
if the user clicks the link, the form is loaded twice and on the second instance it blocks as the link has been used already.
I can code around this somehow, but I still would like to understand why it executes twice,
as there could be other forms or situations with the same behavior.
As with these problems I never know if I caused an issue in my code and I end up chasing all sorts of avenues.

thanks
Johan
GET /SignInResetPassword?coded_rdis_isn=V2AN2KI6R0VHE92QX55O3R61002Z0Z446410TQZV00I2FZDR18 HTTP/1.1 Host: localhost:442 Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="153", "Not_A Brand";v="8", "Chromium";v="153" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer:
https://localhost:442/SignInResetPassword?coded_rdis_isn=V2AN2KI6R0VHE92QX55O3R61002Z0Z446410TQZV00I2FZDR18 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: SESSIONID=MrlXGbhPPdH9e4WrF5aRVl3dZUIvvp; x-TabID=4iunbrgg
GET /SignInResetPassword?coded_rdis_isn=V2AN2KI6R0VHE92QX55O3R61002Z0Z446410TQZV00I2FZDR18 HTTP/1.1 Host: localhost:442 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache sec-ch-ua: "Google Chrome";v="153", "Not_A Brand";v="8", "Chromium";v="153" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer:
https://localhost:442/SignInResetPassword?coded_rdis_isn=V2AN2KI6R0VHE92QX55O3R61002Z0Z446410TQZV00I2FZDR18 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: SESSIONID=MrlXGbhPPdH9e4WrF5aRVl3dZUIvvp
Johan