Require captcha on too many failed logins and disable gzip on omniauth paths