fixed validation in user management