passwd recov: short note on url and a minor fix