In my Grails app I have a controller action that does this:
def activeMember = {ConfirmSignUpCommand signupCommand ->
flash.signupCommand = signupCom
The flash object would be available to the next request, in your scenario that is the rendering of the confirmPassword.gsp page (many times it's also used to pass objects to another controller via a redirect). When the confirmPassword.gsp page submits that is another request and the object you placed in flash is cleared automatically.