You'd think that many sites would already be using a captcha before accepting an application