Users face increasingly impossible challenges to prove they are not bots.