create controllers and work on password confirmation