added secure password and validation