Password confirmation

Usually  that means  you need `password_confirmation=` and `password_confirmation` methods. `has_secure_password` adds those methods, but also does a lot of other junk. I'd do this instead:

```ruby
attr_accessor :password_confirmation
```