- showing an access-denied page to the user on 403 errors
- adding a weakpassword field type
- making the captcha error message less ass