Move validation from controller to User model