add password_confirmation field