add login service and more strict user name password validation.