When resetting password, ask user to confirm

[codinghorror (Jeff Atwood)]

This is specific to login and new account creation. @techapj maybe you could look at adding this to password reset?