captcha improved: configurable valid lifetime, unset temp-valid on for finish, key name based on field id (not name)