Validate user info

This introduces a schema and validation for the info field in User. This is mainly to make everything more easy to keep secure.

Similar techniques will follow for incoming data.

to fix:

• Check that all updating of user settings still works