Before using validator.js

update: function (req, res) {
        validator.check([
            validator.rulesUserSessionId(req.session.user.id)
        ], function(){
            var email = req.param('email');
            var password = req.param('password');
            if(email || password){
                User.findOne(req.session.user.id, function(err, user){
                    if(err){
                        res.json({message: 'DB error.', data: {code: '100', err: err}, status: false});
                    }

                    if(user){
                        // User founded.
                        if(email){
                            user.email = email;
                        }else{
                            delete user.email;
                        }
                        if(password){
                            user.password = password;
                        }else{
                            delete user.password;
                        }

                        user.save(function(err){
                            if(err){
                                res.json({message: 'DB error.', data: {code: '100', err: err}, status: false});
                            }

                            res.json({message: 'User updated.', data: {user: user}, status: true});
                        });
                    }else{
                        // User not founded.
                        res.json({message: 'User don\'t exists.', data: {}, status: false});
                    }
                });
            }else{
                res.json({message: 'No values send. No change.', data: {user: req.session.user}, status: true});
            }
        }, res);
    },