Fix behaviour of Token 'used' property

smsauth/views.py

@@ -18,8 +18,9 @@ def storeToken(token):
 
 def useToken(token):
     retval = False
-    for t in Token.objects.filter(token=str(token).zfill(6)): # pylint: disable=E1101
+    for t in Token.objects.filter(token=str(token).zfill(6), used=False): # pylint: disable=E1101
         t.used = True
+        t.save()
         if timezone.now() - timedelta(seconds=300) < t.sent:
             retval = True
     return retval
@@ -53,4 +54,4 @@ def sendMessage(text, recipient):
         sendSMS(text, phone)
 
     if telegram:
-        sendTelegram(text, telegram)
+        sendTelegram(text, telegram)