add validateuser method