add validation to user JSON