added password confirmation and lenght validation, and associated tests