Added validation for User

Current user can only manipulate their own data