+Security +Clarity -Bugs

Wrapped used $_SERVER variables in filters, wrapped $_COOKIE in a
filter, Expanded some variable names, Squashed a bug in recovery.php
(not sure why, will not be keeping it)