You could send a unique ID to each recipient of the email, stored in a hidden form field. When the form is submitted, you can match the ID with the senders email address, and ignore it if it differs from what you expect.
This will also let you control (and tell) how many times things have been responded to.
Hope this helps,
Dan