add password, password_confirmation fields to user CREATE and EDIT