* simple captcha implementation without captchaimage
* more configuration options
* cleanup, refactor