How is a CAPTCHA checked when a customer resets its password?

See also: