merged password confirmation validation