added password confirmation step