When resetting password, ask user to confirm

Capslock notice already exists, try it yourself… we do not believe re typing adds any value.