all tests pass, password confirmation enabled