recoverable.requestRecovery(argu...) implementation does contain bug, it does not convert email criteria to lowercase before using it to search for user as the result it ends up give invalid user details when trying to recovery account.