check if password and confirmation match, show error