code changes to reflect Kevin's suggestion to take validation out of the update procedure of the user at the model level and move to controllers