add validation for user and add error msg