add validator checking and redirect unauthorized user test