validating userdata server side