updated user controller
added passwordRecovery method.