added validations for user, no sessions yet