confirm password is now working. Still need to decide whether to block user until email confirmation.