simpler password, closes #69
captcha after three failed logins, closes #70