ensure User instance responds to #password_confirmation