add server side validation