Implement a CAPTCHA API endpoint

To retrieve a CAPTCHA ID, access /api/key. That will return a unique
CAPTCHA ID. This can be used to access an image or audio file as
/captcha/<id>.{png,wav}.

Close #90
Ref #71