I'm not sure I understand the problem with WordPress and it would be my number 1 recommendation. You don't have to use .htaccess with it and has very good spam tools.
WordPress will email you your password if you forget it (or atleast allow it to be reset)