[login CAPTCHA] improved ui, added 'ajax refresh' func