disable password recovery
hid password change link
restore password confirmation