validate user info
secure passwords