User validations and secure_password almost complete