Unfortunately, there are no options other than changing the form method from 'get' to 'post'.
GET encodes all of the form fields into the URL. There's no way to hide anything without removing the data.
A quick Google search for "prevent page expired message" turns up quite a few results (the examples are mostly PHP, but the concept could be transferred to any language):
Google - prevent page expired message