sign up validation without password control