added login validation & standard account: admin/password