captcha without js

untested code!