added validate User API call
added cookies & sanitize to source control