Account recovery for compromised user accounts