fix user validation
fix user validation
finish authorization