validate that identity email is present and unique, and that its user_id is unique.
give more room for login/password labels.
add uniqueness/presence validations to authorizations.