Ensure confirm password on register only accessible if not already confirmed

Currently when you register without providing a email address you get logged in and redirected to the password confirm route; this is to double check the user has registered with a password they know.

If the user gets their password wrong during this step, the UI should then display a password and password confirm fields so they can enter and confirm their password choice within the same form.