validate_user() bug fixes and passing unit tests for #49
expanding negative contstrained testing