Fix up more sign-up bugs, add :password_confirmation to permitted parameters