Weak password recovery mechanism for forgotten password in Strapi