user signup is now more secure, and error messages are displayed if signup is invalid