added password recovery