working one time password validation; fixed captcha