get user password_confirmation attribute a better way