verify captcha response before sending email
add url the referrer url to the email message
add various versions of the site to the CORS whitelist