password confirm validation checks - bugs fixed