adds password and password confirmation to user