fix password recovery