check that password_first is set, otherwise you get an invalid "passwords don't match" error (they did, except that password_first validation failed)