Require password confirmation upon password reset

Currently, if one want to reset ones password, one doesn't actually have to confirm it. The field for password confirmation is present, but it is ignored upon resetting the password. This adds a test for the case and corrects the behavior.