add captcha to register and recovery pages, resolves #12