add validation for email and password