Recover access securely.

Password recovery uses a time-limited six-digit code, not an email link.