user & password validation added