You applied the validation show if around the field where you enter the captcha value. You should be applying it around a message like "your entered text didn't match" and not around the field itself.
Your Server Validation is set up wrong. You are using "Required" validation and should be using "Like entry" validation to compare the session value to the value entered through the form.