Fix hex.user update: should compare new_password with confirmed password

Bug: when updating user details, it compares current password with confirm password.

It should instead compare new password with confirmed password.