resetting of captcha done in DownloadAuthService
tests for DownloadAuthController