However, I just tried to log in. Tell me if that looks wrong, because these were rejected as the wrong captcha.
You got it right. The problem is that the captcha is so good that the provisioning service can't recognize it's own code - proving it itself is a bot.
Bah hahahhahahhha

In all seriousness though, I've never had my captchas rejected that often. Nobody else is having problems?
You know, captchas are usually only used as a gateway to prevent bots from automated sign up, not to prevent *signing in*. The passwords are too ridiculously long to ever be cracked while relevant, so brute forcing isn't an issue. Why not just do away with it on the provider login?