changes to users

added password confirmation