This is a standard procedure, especially in times of high traffic (some of which is automated, from people running bots etc). We use a service called cloudflare to just validate that the page is being observed by a browser and not a script.

Here is a fairly old answer on security exchange about it.