Fixed password recovery page

(#38) Emails in URL arguments still aren't made URL-safe, though.