validate user by email