Implement registration spambot protection

[stevenleeg]

Something like recaptcha. Make sure it's optional (on the admin's end).

Not a requirement for the milestone, but it might be useful to optionally collect e-mail addresses and require e-mail validation.