added password confirm, db auth stuff is broken though