If a user never enters the password_confirmation field in the signup form, it never goes through validation