offer validations at model and password recovery