added password and username recover (closes #55)