add password confirmation to form; users can now sign up