after testing user with password_confirmation