Fix User factory to include password confirmation