make password confirmation message more clear