fixed validate user (not passing parameters and using sets now)