fixes #941 - Rework password recovery and remove IsLocal checks