add validation for username and password