models/user: Move validations TODO and add another one.