apps: add captcha