Check if actix action is called only once

[matzipan]

Follow-up on #155

This should be some sort of atomic counter that counts to 1 in the authentication code receiver. This is needed so that we don't trigger a new account creation flow accidentally if refresh is hit or there's some browser quirk.