removed captcha text encryption since it is stored in session object which will never leave server side; now captcha validation is done in client side using ajax