added second password field and validation