correctly validating users on queue endpoints