Password confirmation

Why set the `url` in the controller? Usually we create URLs in the view.