I believe it is related to the form security token and expiry.

No need to go into the gory detail, I've leave that for the post mortem. Meanwhile does this issue ring a bell with anyone?