fixed bug password recovery