add npm-user-validate package
start using npm-validate, should fix #294