i was wrong, what was actually happening was that if you go to login with the javascript off then turn on the javascript you still have to do a captcha

except if i close browser, reopen then enabe ajax.googleapi.com before logging in the captcha doesnt need to be done

i turned off all addons except noscript, missed a wordwrap and a google/yandex redirect one so ill try again, might stop history wiping on exit too