add JSR 303 Validation for user