user validates role