Password recovery controller