fixed validation rule for User