add password and password confirmation to users