added password
flash message for non-matching passwords