FIX: ConfirmedPasswordField used to expose existing hash