fix bugs with invalid signup logic

return false, preventing  page refresh and allowing the customer to see the error message
use strict comparison between password fields