adding password recovery