Added password match check to Admin controller

Also fixed typo in Flash warning redirect: “manager_user” ->
“manage_users”