Captcha Confirmation Refactoring

- Moved server-side Captcha confirmation code into Captcha class
- Made username, password fields required on login page (why were they
not already required?)