fixed validation user and controller