add user role validation