fix user_add_validate() to correctly get current user's data