update captcha permissions