feat(auth): password recovery ui

+ password recovery ui
+ added new attribute called 'auth' to activities, which will require login for activity (if set to true) or allow activity to run despite user is not logged in (if set to false)