improves error handling
refactors authorization handling in the server for better extensibility
removes dependency to Google's recaptcha
adds support for a generic captcha protocol