fixes to avoid overwriting captcha records in database when sessions are different