Validate user credentials