Add forced password confirmation.
Add docs for always-confirm-passwords.
Update README.