Changes in recovery email:

* Prompt for {SITE_NAME} address.
* Add CAPTCHA to make enumerating through usernames difficult.
* Do not reveal recovery email in response page.

Signed-off-by: Birin Sanchez <birin.sanchez@puri.sm>