disallow invalid user signup