completed validate_user