fixed #32 Web: recovery module password lost

cancelled on alternative sha1 generator as it is useless