password confirmation added (not even the slightest contribution of jjromeo)