added password_confirmation handling