discussing "authentication-as-captcha" with @t