basic server side user validation