Replay Attack prevention for HTTP Post of Auth details

Hi, I have an application (let's call it website 1) which users log into using a username and password. Once logged in the app sends back a simple landing page with some links, and in hidden fields it...