why do we still have to "confirm" our passwords like. What are we confirming? that we typed it right? we just typed it right...