a little cleanup on user validations

add phone number length is 12 to replace the regex for now, and removed email confirmation requirement.