API requests with valid API key bypass CAPTCHA
API requests with valid API key bypass CAPTCHA

requests coming through handleRequest where $api == true can bypass captcha checking allowing API to continue to function even when recaptcha is active on the public form.
chusopr/casimir