Hmm are you doing always allow or individually signing? It may be sending multiple requests and that might be an issue