better auth validation