added captcha
wrong key check
forgot http
more spam stuff
addition backend phone validation
changed validate_form_security_flag default to true