added password confirmation and fixed up user spec