add authorization after password recovery
remove blank option from role select