add is_verified param and fix confirm password