added second validate to support create
validates :password, :presence =>true, :confirmation => true, :length => { :within => 6..40 }, :on => :create