added password, validation to users