adding a password confirmation request and checking passwords match