add validations
fix users auth