validations for user pw
added resources for users