updated User.admin_api_attributes
comment out validations for now