password hash
new validations on user