user password and validations