add captcha on login, add password reset, add register staff