login-password validation