fix broken password confirmation spec