model validations
apply for current_user