Level Nineteen - Password reset

This application emails the flag to level19@websec.fr, in case it was forgotten.
Since we don't discriminate against Tor users, everyone gets a clownflare-style
captcha (to protect us against hackers).

Here are the sources for the index, the captcha, the anti-csrf, and the prng.

captcha image