user login validation - update