validation of both email and pw. moved ignup validation from controller to model