validate from-user and to-user. Qiu