CAPTCHA Auth Middleware
=======================

CAPTCHAauthmiddleware is a WSGI middleware python packages for putting
CAPTCHAs on forms for unauthorized users (those that haven't logged in
yet).  If you aren't authorized -- in python terms, if remote_user is
not set on the request -- then CAPTCHAs and a hidden key will be added
to forms with ``method=POST``.  You will be required to correctly
solve the CAPTCHA in order to submit the POST request.  Otherwise, the
CAPTCHAauthmiddleware will stop your request and redirect you back to
the form.


What are CAPTCHAs?  -or- I hate those things
--------------------------------------------

CAPTCHAs are admittedly imperfect ways of telling humans and computers
apart.  Presumedly if you are already identified (logged in), then the
computer is satisfied that you are you.  But what if you want to make
an anonymous comment on someone's blog post?  In a perfect world,
there would be no CAPTCHAs.  In the real world, there is SPAM.  So if
I want to protect my blog from SPAM-bots, I need to do something.
Again, CAPTCHAs aren't perfect, but they're at least something.