removed user validation for pass recovery