fixed duplicate checking will catch it, but add client-side protection against double...