Validate for user instead of user_id