removed password conf validation from user model