Fixed possible 'type juggling' flaw on password validation, Improved password recovery (thanks to Jos Wetzels for reporting this)