add captcha_expected session var