added function to require users to enter a password/passphrase twice.  it's checked for validity before they can continue