I've used brute-force cache defeating logic before. This involves always including a hidden field like this:
<input type=hidden name=rand value=<%=$rv;%>>
where $rv is a random integer based upon time-of-day or some such. Every form get and post (and even hrefs if you want) that you do should now include this random seed so that subsequent requests can't be cached by a server somewhere.
This is a pain but I've found it necessary in tough situations like the one you describe.
Dave
===========================================
http://badblue.com
Free small footprint web server for Windows
P2P file-sharing, PHP, wireless apps & more