added validation and pw on User model
sign up
user can login and logout