Double confirmation of account password

## The Issue
Probably a good idea to ask for double confirmation like we do in the desktop app. This may add more friction, but it's also better than typing it incorrectly and losing the credits.

@kauffj edit attack: also make entering your password opt-in, rather than default

## System Configuration
- Device:
- Android version:

## Anything Else

## Screenshots

## Internal Use

### Acceptance Criteria
1.
2.
3.

### Definition of Done
- [ ] Tested against acceptance criteria
- [ ] Tested against the assumptions of the user story
- [ ] The project builds without errors
- [ ] Unit tests are written and passing
- [ ] Tests on devices/browsers listed in the issue have passed
- [ ] QA performed & issues resolved
- [ ] Refactoring completed
- [ ] Any configuration or build changes documented
- [ ] Documentation updated
- [ ] Peer Code Review performed

Start by reviewing the existing desktop app password-confirmation flow referenced in the issue and locating the Android account or credit-spending flow. Done means password entry is opt-in and, when used, requires double confirmation before credits can be lost; the issue provides no named tests or files.

Written by the indexing model from the issue text.