fixed not strict enough check in custom captcha