Password recovery

Recovery is limited to one request per 24 hours

(additional requests are automatically ignored)