added tests for password recovery