And I'm telling you that you'll need to use the post-REDIRECT-get
pattern to avoid the issue.
If the last request made is a redirect-get if you refresh you'll just get the same page--the one without the form submission.
Or you can use <s:token> and all that, but IMO the PRG pattern is simpler.