user can see an error message if pw doesn't match confirmation'