validate access to user
sth moved to partial _user & format some files