more validation. showing users on success