validations and user password