Actually validate the recaptcha. normalize username creation for new guest users