The controller validates the user or it gets the hose again
password hash
user validation