move username/password emptiness validation to model