TEAMMATES uses reCAPTCHA on the Recover Session Links page. By default, the CAPTCHA widget is disabled since no keys are configured — this is fine for development but should be enabled for production.
localhost and/or 127.0.0.1 to the allowed domains.captchaSiteKey in config.tsapp.captcha.secretkey in build.properties