testing for password confirmation