Fixed admin/user edit feature

-update admin user.php (edit) — preventing password hash from being
hash again.
clean controller/admin/setting (index)

clean the values before saving it in the database.
[Brute Force Login] implementing captcha

comment code.