use the session-manager from the service-locator in captchas