Merge pull request rails#4690 from jdutil/filter_password_confirmation

Add :password_confirmation as a filtered param by default.

Author: josevalim

railties/lib/rails/generators/rails/app/templates/config/application.rb

@@ -43,7 +43,7 @@ class Application < Rails::Application
     config.encoding = "utf-8"
 
     # Configure sensitive parameters which will be filtered from the log file.
-    config.filter_parameters += [:password]
+    config.filter_parameters += [:password, :password_confirmation]
 
     # Use SQL instead of Active Record's schema dumper when creating the database.
     # This is necessary if your schema can't be completely dumped by the schema dumper,