added attr_accessible password_confirmation