email user validation, captcha

I must be looking in the wrong places, I'm having trouble setting up either email validation as I would expect it to work, or captcha, and I'm not sure where the documentation is for it... In the 'preferences' tabs (I'm running the svn tips 1674 + b1.5 xar), I have email host and admin email address- which I have sending the email- but, after it sends the confirmation email, the user seems to be actually registered, it isn't waiting for a response, for that matter, there doesn't seem to exist the configurations I would expect of a mechanism for it _to_ listen for a response. Does this mean that I'm supposed to manually set the rights to require a group membership, then manually look for responses? Or create a script that listens for email responses and adds users to the "verified" group? I'm missing major chunks of how to get it to work. Also, I have not found the option or tab or preference (or documentation) for the 'captcha' functionality. Probably I just need to be pointed in the right direction? Desired functionality: - Registration first requires passing a captcha test. - The user enters their email address. - Their verification email is sent, with some kind of GUID. - Their ID is created in some 'locked- waiting for confirm' limbo. - XWiki receives their email and confirms that it has the GUID. - Their status is changed from 'locked' to 'normal registered user'. o What parts of this are currently implemented? o What parts of this are wishful thinking? o Where can I find documentation and help? -Thanks, -Tom -- May 4, 1970: Alison Krause, Jeffrey Miller, Sandra Scheuer, William Schroeder.