fixed password confirmation in validation recipe