add validation for user