nav bar fixed
integration captcha authz to shiro