How is security deposit recovery handled legally?