The script does not create a new token. Same token at every run.

[halojoy]

The fix is to put the setToken in echoInputField().
And not in the __construct.

public function echoInputField()
	{
                $this->setToken();
		$token = $this->getToken();
		echo '<input type="hidden" name="'.$this->namespace.'" value="'.$token.'">';
	}

[halojoy]

The setToken() should be:

	private function setToken()
	{
        $token = md5(uniqid(rand(), TRUE));
        $_SESSION[$this->namespace] = $token;
	}