models#user: fix validation bug on login