change ajax validate user, use username&password when user provide that.