User creation requires password confirmation