I found that when I removed the second password field users thought they were signing instead of registering. This lead to users creating multiple accounts and panic-y emails about lost data.