strict users validation