add confirm password, hash password