I have added CAPTCHA verification to the login page. This works only if you have the "Remember me" option in your profile not selected. It checks for a login cookie, if not found it is enabled.