fetch captcha from server