add user w/ validation