Modified /login handler. Enabled flash messages on login failure. Added captcha on login failure.