fixed validations, password confirmation