fix confirm password logic