no, i had not excluded.
but i added the login page to the exclusion list in Performance>Page Cache>Advanced. i added the following which i think should have got the job done ‘/xyz’, ‘xyz’, ‘https://mywebsite.com/xyz’ and Purged all caches
on the positive side, the problem of captcha repeating itself is gone and i am getting getting new captcha on every attempt, but the problem of login page refreshing itself and not logging in is still there.
