pulling out validation for user_id in tool#create