I Wrote The Same Bug Twice. Both Times It Said `$_SESSION`

GuardPress had a CAPTCHA on the login form for months before anyone realized it wasn't actually validating answers. A year later we shipped 2FA, and the code-input field never rendered for the users w