finished: password recovery, and other tweaks