stub password recovery