Ignore Forget password (we don't need that right now)
Front-end validation as well:
Examples: Password length >= 6 (optional on the front-end), All fields are required, email is properly formatted (if you wrap signup and login in an HTML form, you can leverage some front-end HTML form validation, required and right typing)