1: You could keep a log of the pages logged by that IP, and figure out if the user has been referred by itself/the most recently viewed page
2:The page expired thingy shouldn't be a problem; all the user has to do is hit refresh, but that's all just a security precaution in IE. I don't think your users will mind too much. If you're really peeved by it, you could set the pages to never expire (in the header), but you're dynamically generating pages, and no expiration is bad mojo.