better validation on saving a password and adding new user