this feature is not security related perse, it's just a way to block
bots and web crawlers. The challenge is occurring only on public pages.

Untested partial fix for issue #36

Also create seperate account security options page

This commit requires a new database table