Use forms' clean method for username/password validation