Add RecoveryToken to UserAuth for future password recovery functionality