add validations for user on create