apo. add password confirmation to edit_password page