#9: add regex login validation