moved confirm old password condionals to model