Security Q&A passes when it shouldn't...

I have a CAPTCHA as well as the security question with the answer input field on a form. If I enter everything correctly on the form except for the security Question's answer, I see the page redisplay with the failure message "Incorrect repsonse; please try again." next to the answer input field. This is correct behavior since I answered the question with random text which was incorrect.

When this error occurs, I have to also re-enter the CAPTCHA which I think is correct behavior.

So I entered the CAPTCHA correctly but purposely put some random text for my answer to the security question to see if it would fail again. It should have failed, but didn't. It went ahead and did the insert it's supposed to do when the form validates correctly.

It fails as it should when the random question's answer isn't correct on the first submit only, but passes when re-entering the random question's answer incorrectly on the second try.

Any idea why this is occurring?

steve