moved captcha.php out of includes.
added a file (install.php) that will set permissions on includes & database & templates to be unviewable and non-executable from browser. this also means that bots cant scrape parts of the database for information such as hidden boards or information about how many reports exist.
