Update profile page should have verify new password box

[nancytao]

If new password fields do not match, add an error for that and request focus in the activity, so that the user will not accidentally change password to something they do not know
i.e., "New Password:" field and a "Confirm new password" field