When creating a user or when changing a users password, and the passwords typed by the admin is not matching, the second password field should invalidate and a hit should be shown when trying to submit the form, if possible.