Refactored ValidateUser, now it works without directly access to entieties