add validation of password confirmation