Owner account recovery

Use the one-time recovery code previously generated by a Super User in the application. This only resets an existing Super User; it cannot create an account or grant a new role.

No email-reset service or public default administrator is used. Ordinary account password resets are managed by authorized application administrators.