commented out password validations, validations and their specs for user otherwise should be done.