UserController : validate api params