Thanks for your response. I'm very certain that this is a breaking change/bug. The previous and current documentation clearly states that password confirmation is an optional feature.

> If you don't need the confirmation validation, just don't set any value to the password_confirmation attribute and the the validation will not be triggered.

But it was broken in Rails 4.0. I think either that should be fixed or Rails documentation updated.