add some validation to sign up