[#7759] after pwd recovery, don't let login page send user back to pwd recovery form (referrer)