Hiya, I don't know much about Django, but I think instead of managing nonces explicitly, they could be incorporated in [sessions](https://docs.djangoproject.com/en/4.0/topics/http/sessions/).