added password and password confirmation attributes to user