removed password confirmation field from session/new