more documentation.
validate user-pass on setup (regex)