upload Captchas to media folder

[Bartzi]

It might be a better idea to upload captchas to the media folder instead of static folder.
Having them in the static folder might enable attackers to overwrite our very own static files.

With the files in the media folder it might furthermore be possible to do pre-processing of the data before getting sent to the user.