the password confirmation at the user update is still missing