add User password methods, basic validation