password  confirmation logic