User-agent: * Disallow: /token Disallow: /recover