added simple password recovery function #28