add a recovery password page