changed password2 to password_confirm