The password expiration is a very usefull tool, i've liked that works with pre existent user too,
will be usefull if may send an email some days before the password expire
Fully agree with all, you must know how to config and what to install ,after is very simple. The math captcha is a good choice for some sites, i've saw something like on wordpress, but sometimes yours give hard math to solve for my brain.