Use a better method name to check the requirement of password confirmation

Also improve changelog entries related to secure password to proper
highlight.