just fixed the routing so that users can't get to the no longer operational password recovery page