FIX: ConfirmedPasswordField used to expose existing hash
Merge pull request #2128 from hafriedlander/fix/hashleak

FIX: ConfirmedPasswordField used to expose existing hash