Description of problem:

I have a sudo list of rules that we used to validate for users..

// check username
		if (user.username().length()<1){
			list.add(Users.LOGIN_TOO_SHORT);
			list.add(Users.LOGIN_NO_SPECIAL_CHAR);
			fatalError = true;
		}
		
		// check username
		if (user.username().length()<3){
			list.add(Users.LOGIN_TOO_SHORT);
			fatalError = true;
		}
			
		if (user.username().length() > 100){ 
			list.add(Users.LOGIN_TOO_LONG);
			fatalError = true;
		}
		
		String bad_characters = "`~!#$%^&*()+=[]{}';:\"/,<>?\\|";
		
		for (int i = 0; i<bad_characters.length();i++) {
			CharSequence badChar = bad_characters.subSequence(i, i+1);
			if (user.username().contains(badChar)){
				list.add(Users.LOGIN_NO_SPECIAL_CHAR);
				fatalError = true;
				break;	
			}
		}
		
		// check password & confirm password   
		if(user.password().length()<4){
		    list.add(Users.PASSWD_TOO_SHORT);
		    fatalError = true;
		}
			
		if(user.confirmPassword().length()<4){
		    list.add(Users.PASS_CONFIRM_TOO_SHORT);
		    fatalError = true;
		}
			
		if(!user.password().equals(user.confirmPassword())){
			list.add(Users.PASSWD_NO_MATCH);
			fatalError = true;
		}
		
		if(user.get_quota().length() > 100){
			list.add(Users.BAD_QUOTA);
		}
			
			
		
		// check email
		if(user.email().length()<6){
		    list.add(EMAIL_TOO_SHORT);
		    fatalError = true;
		}
		
		if(!user.email().contains("@")||!user.email().contains(".")){
		    list.add(Users.EMAIL_INVALID);
		    fatalError = true;
		}

public static final String LOGIN_SUCCESSFUL = "Login successful!";
	public static final String INVALID_PERMISSION = "Invalid Permission to perform this operation";
	public static final String LOGIN_TOO_SHORT = "Login is too short (minimum is 3 characters)";
	public static final String LOGIN_NO_SPECIAL_CHAR = "Login should use only letters, numbers, spaces, and .-_@ please.";
	public static final String LOGIN_DUPLICATE = "Login has already been taken";
	public static final String LOGIN_TOO_LONG = "Login is too long (maximum is 100 characters)";
	public static final String PASSWD_TOO_SHORT = "Password is too short (minimum is 4 characters)";
	public static final String PASS_CONFIRM_TOO_SHORT = "Password confirmation is too short (minimum is 4 characters)";
	public static final String PASSWD_NO_MATCH = "Password doesn't match confirmation";
	public static final String USER_CREATION_FAILED = "User registration failed: validation failed";
	public static final String USER_CREATION_SUCCESS = "User registered!";
	public static final String USER_UPDATE_SUCCESS = "User updated!";
	public static final String SELF_REG_SUCCESS = "You have successfully registered!";
	
	public static final String EMAIL_TAKEN = "Email has already been taken";
	public static final String EMAIL_TOO_SHORT = "Email is too short (minimum is 6 characters)";
	public static final String EMAIL_INVALID = "Email should look like an email address.";
	public static final String EMAIL_TOO_LONG = "Email is too long (maximum is 100 characters)";
	public static final String SELF_USER_DELETE = "Can not delete the currently logged in user!";
	public static final String FIRSTNAME_TOO_LONG = "First name is too long (maximum is 255 characters)";
	public static final String LASTNAME_TOO_LONG = "Last name is too long (maximum is 255 characters)";
	public static final String BAD_QUOTA = "Maximum running instances must be a positive whole number less than 2147483647";
	public static final String NO_USER_SELECTED = "Please select any user to be deleted before clicking Delete button";