add a generalized 'read and confirm password' sub