fix(password): expose passwordRepeat as commons.directive