refs #9 - change name of password confirmation field to password_ctl