switch to using relative paths
adding password validation functions