Server side user validation