add recaptcha middleware; update recaptcha handling