validations to users and things