fixed password confirmation