Changed checks of user id and password validity to be when they are set, rather than when the account is being committed to the database.
Fixed a typo. Clear already encrypted values when user is set/changes.