add user validations with tests