add validation
add secure passwords