settings and password confirmation