added user password confirmation