I've just noticed that after too many invalid logins, when the brute force settings kick in and block access, there is also a recaptcha shown to give users a chance to redeem themselves and prove that they are actually human after all. Haven't noticed anything about this in the documentation. Anyone know if it is possible to turn this off?