validation for user fields