user validation begin
user validation. password security