update user controller, added validation