stronger username and password validations