added password recovery to header