only staff can manage accounts
Validate that birthday is not in the future (#5)