validation constraints on User class