Fix so recovery_authentication_enabled is correct for new users

A subtle and incredibly frustrating to find binary/string error, but users weren't getting the right value for recovery_authentication_enabled on creation.