/recover page now handles form data, redirects