User must have matching password + confirmation to sign up