add a confirm to enter password twice