add email regex validation, lowercase before saving, hash password