client side CAPTCHA solution length checking now gets min/max lengths from server, rather than being hard-coded into the js