add password and username validation