wrote validations for user/order