Logins are being accepted using any random characters entered into the Captcha box. It doesn't seem to matter what is entered so this function is simply broken.