add confirmation when creating new password