Prevent repeated code requests

Technically someone could guess the code, or just spam someone with requests