validation + adding users via REST API