password_confirm changes
workaround for shoulda bug and password