feature(mail) add password recovery