added password confirmation