hack user validation to simulate password confirmation