change API, remove user validate