add salt encrypt for password
add user name validation check