security fix

This release contains a security fix addressing a potential case where a malicious user may bypass the recaptcha by injecting his own secret if the package user has not sanitized the recaptcha Response from the client.

Thanks to @dsamarin for reporting this