add validation to user creation