Recover access

The recovery link is single-use. Completing it revokes every recorded DMB session before the password changes and requires staff MFA again.