CAPTCHA no longer falsely fails with "You did not complete the CAPTCHA verification properly" when a form is resubmitted after a different error (e.g., an email that already exists, then corrected). Cap tokens are single-use, so the retry was re-sending an already-spent token. Verified tokens are now remembered for the visitor's session, so resubmits pass without forcing a fresh solve.
1.0.6
Fixed
XenForo 2.3 compatibility: the "fail open" fallback when your Cap instance is unreachable now works on XF 2.3 (Guzzle 7) as well as XF 2.2 (Guzzle 6); it was catching the wrong exception type on 2.3.
The widget could previously be shown but never enforced: if the Secret key was left blank while the Instance URL and Site key were set, guests saw a CAPTCHA that was never actually validated. Rendering and validation now use a single "fully configured" check, so the displayed state and the enforced state can never disagree.
Changed
Refactored the Instance URL / Site key / Secret key admin fields into a shared macro for consistent rendering on the options screen.
