The more I think about it, the more I'm not sure this is that important to guard against. I think writing specs around the sign in/up/out pages would be useful, but the pw confirmation field is really there to guard against human error.

I will update the seed for good measure regardless