password confirmation working with sorcery