change confirmation routes action to patch from put add password match for users