document CAPTCHA handling