add a simple validation for username and password