Add password recovery routes, WIP