added confirmation for password