added password recovery feature - to be completed