When re-setting password, allow user to 'confirm new password'
When re-setting password, allow user to 'confirm new password'