added some validations to email and password, realised i need to be working in 'create' not 'new'