password recovery fix