start adding password validation
add basic validation of user/pass