First working? pass at user password handling.
Added basic validations, comment to metadata sources