fixed recovery password action