add validation spec for user.rb #11