Nope, just requiring email validation. I didn't want to make it too difficult to join. I'm now 100% convinced that CAPTCHA won't matter since it's humans doing the registration. The spammers mostly can't close the loop before I nuke the account. I just want better automation, and I want to make sure I'm solving the right problem here.