Unified captcha checking in newPasswordAction.