adding in password and password confirmation fields for users
allows users to be create with a default password
updated controller due to rubocop
added in admin tests