allowing password recovery via e-mail reset code