title: Why does Devise allow me to create User without providing password_confirmation?
body: <p>I'm using Devise in my project. Why does it allow me to create User when I don't provide <code>password_confirmation</code> in request? When I provide <code>password_confirmation</code> other than <code>password</code> it doesn't allow me to create User. How to force providing <code>password_confirmation</code> in params?</p>
  <pre><code># user.rb
  class User &lt; ApplicationRecord
    devise :database_authenticatable,
           :jwt_authenticatable,
           :registerable,
           :validatable,
           jwt_revocation_strategy: JwtDenylist
  end
  </code></pre>
  <pre><code># part of my routes.rb
    devise_for :users,
               path: 'api/v1/users',
               controllers: {
                 sessions: 'api/v1/users/sessions',
                 registrations: 'api/v1/users/registrations'
               }
  </code></pre>