fixed password confirmation in controllers