login valdiation
sign up validation. email must be unique (checked before creating user because User object does not require email to be unique)