added password protection to recovery code download