First-login validation steps