Corrected handling of HTTP headers in Controller_Captcha (with proper caching headers for image-based captchas).