added check if user has confirmed his account before recovery message sent