QA-4950: actually, the tokenized form needs to be rendered at each request since it puts currentFormId in the request on which captcha depends to render properly.