Add more validations; exclude Users from CMS