include password confirmation field