added validation on user auth