Since password_confirmation is not verified in backend, remove on front

password_confirmation gives just the sensation of safety. When (and if)
the user forgets his/her password, it's ok to ask to create a new one
using the forgot password wizard.