isValidUsername() and isPasswordSecure() are now private.