User model with format validations