title: WSO2 IS 520 password recovery issue
body: <p>Steps followed:<br></p>
  
  <ul>
  <li>getCaptcha</li>
  <li>verifyUser</li>
  <li>sendNotification
  Receiving the confirmation code in email via link,<br>
  But sending it as a request in confirm code, always return invalid !<br>
  Notification expiry is set 60 minutes.</li>
  </ul>