validation when user does not exist