Подтверждение пароля

...
validates :password, presence: true, :confirmation => true
validates :password_confirmation, :presence => true
....

<%= form_for(@profile) do |f| %>
<%= render 'shared/error_messages' %>
<table>
    <tr>
        <th id="table_th"><b>Имя</b></th>
        <th><%= f.text_field :fname %></th>
    </tr>
    <tr>
        <th id="table_th"><b>Фамилия</b></th>
        <th><%= f.text_field :lname %></th>
    </tr>
    <tr>
        <th id="table_th"><b>Тэг</b></th>
        <th><%= f.text_field :tag %></th>
    </tr>
    <tr>
        <th id="table_th"><b>E-mail</b></th>
        <th><%= f.text_field :email %></th>
    </tr>
    <tr>
        <th id="table_th"><b>Пароль</b></th>
        <th><%= f.password_field :password %></th>
    </tr>
    <tr>
        <th id="table_th"><b>Повторите пароль</b></th>
        <th><%= f.password_field :password_confirmation %></th>
    </tr>
</table><br>
<%= f.submit "Создать профиль", class: "btn-primary" %>
<%= link_to 'Я передумал', profiles_path %>
<% end %>

params.require(:profile).permit(:fname, :lname, :tag, :email, :password, :password_confirmation)

def create
    @profile = Profile.new(profile_params)
 
    respond_to do |format|
      if @profile.save
        format.html { redirect_to @profile, notice: 'Profile was successfully created.' }
        format.json { render :show, status: :created, location: @profile }
      else
        format.html { render :new }
        format.json { render json: @profile.errors, status: :unprocessable_entity }
      end
    end
  end
 
  # PATCH/PUT /profiles/1
  # PATCH/PUT /profiles/1.json
  def update
    respond_to do |format|
      if @profile.update(profile_params)
        format.html { redirect_to @profile, notice: 'Profile was successfully updated.' }
        format.json { render :show, status: :ok, location: @profile }
      else
        format.html { render :edit }
        format.json { render json: @profile.errors, status: :unprocessable_entity }
      end
    end
  end
 
private
    # Use callbacks to share common setup or constraints between actions.
    def set_profile
      @profile = Profile.find(params[:id])
    end
 
    # Never trust parameters from the scary internet, only allow the white list through.
    def profile_params
      params.require(:profile).permit(:fname, :lname, :tag, :email, :password, :password_confirmation)
    end