Better character escaping for captcha-form