user signup post API, part 3: user input validation and sanitization