basic captcha logic. Still must exempt upgraded users
finishing captcha logic for v1. Note requires redis to temporarily stash hostnames, review for storage concerns
the create_app part is weird
added web test
fixing tests
changing icon for captcha insterstitial