change password only when recovery mode