fix password/username validate