some client side password confirmation validation