add pwd confirmation and length validation middleware