Since you are using session handling, and presumably a database, you should set a flag that no more user input is allowed, so that second submit has no effect. Or, update the information based on the session identifier.
If what you want is to have that form expire again, you may be able to set headers accordingly. In PHP, I had this lying around:
header ("Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0"); That's probably wrong--do some searches in google or google groups for Cache-Control.