fix package.json, add validator
affix userlist. fixes #12