sign up: ask user email; login form validation