- adding default value for $recoveryPassword
- set password correctly in lost password