Possible security issue: if captcha cookie is persistent, could be found on users machine. Can we change it to session only cookie?
Possible security issue: if captcha cookie is persistent, could be found on users machine. Can we change it to session only cookie?