Add captcha before permitting download from web for guest users

I've had over 500 file downloads so far today and I cannot believe they're all from legitimate users.

It would be nice if there was some sort of captcha that had to be completed before a download is started for a non-guest user. This would quickly stop bots from downloading files yet still allow unhindered access for authenticated users.