Avoid reprocessing of what was intended to be the same request

[MateuszKubuszok]

• require request ID in request which modify state
• store IDs of received requests in some cache for some time
• return calculated value instead of processing request again
• apply this only to commands - queries should be not be cached
• apply this logic after authentication to make all changes in permissions reflected