* Validate if they aren't empty * Validate if they exist in the db (username and password should match)