password confirmation is now okay