You are right, most place where create password ask for type in twice,
one reason I think is give people chance to remember
the password. Let see if other can give good reason why we don't do
that ?
Did you deployed more applications in b28 than in b27 :-)