add exception at validate_login()