fixed a bug with the password recovery where it would break on bad usernames