added password confirmation requirement