dont expose userbean and email validation