moved user create and validations to service objects