CAPTCHA is not configured. Add CAPTCHA_SITE_KEY and CAPTCHA_SECRET_KEY to .env for bot protection. Rate limiting is active regardless.