Update the captcha to work without JavaScript.

Move the iframe outside the hidden widget.
Update changelog.