updated validation rules and tested new auth system as per issues #7 and #5