<% form_for :user, :url => {:action => "update", :id => @user } do |f| -%>

New Password
<%= f.password_field :password %>

New Password Confirmation
<%= f.password_field :password_confirmation %>

<%= submit_tag 'Change' %>

<% end -%>