improve user validation on signin