validate login format