rename verifyPassword() to validate()