added validation to staff user and initial values to Session