handle password_confirmation on sign-up