Completed validateUser method, which checks username and password is correct and updates failed passwords and lockouts if not