Well, alot of people don't like the formkey code, and I certainly haven't been in love with it the last couple of days, but it is needed to quell many abuses, and it needs to work properly. Yesterday, I fixed several issues that never previously revealed themselves on my test server (namely because I'm not a million users testing it) but manifested themselves on slashdot.
Hopefully, today, those issues will be resolved.