attempting to get password recovery working