fixed password recovery error handling