fix password confirmation