issue #32 Web: recovery module password lost

still todo:
make success/fail messages work
db insert/update

alternative sha1 generator