user form updated for password matching JS