update user api to use new validation functions