Are there any other steps, or things I've missed which would be useful?
i was reading that there should also be a timestamp variable which should be checked against a 5/10min time frame in the request.