Validating user-authenticated actions