ui: add master password confirmation