state how replay attacks could be prevented