user membership validation