more validation on client side for signin