This might not be a helpful enough message. The user might be under the false impression that they're supposed to be typing their password twice (like a confirmation). We probably need to point them in the right direction.