doesn't allow user to sign up if passwords don't match