Fix #172: don't require captcha if possible