experiment: more flexible captcha