Session 4: validation, secure password, login