as seen today, Captcha for some reason not preventing example.com spam memberships

temporary fix implemented: blocking exmple.com email domain

requires investigation.  Perhaps contact Stripe re why the same card being validated multiple times. Or do we need to do an initial Stripe validation in our software?

