basic routes and user validation