add creating users and server side validation