PasswordRecoveryController (draft)