Additional validation messages - for username and password