shiro and captcha integration,not the best solution