add validation and password to user