Encode various JavaScript URL components
Fix issue with environment key on configuration file update
Add option to disable password recovery