Validating recovery link