adding password validations and unescaping html'd errors to resolve #18