Extend validation

- Added '_week_start_at' as allowed field to validation
- Two extra validations added so that we return 400 with an erro message instead of generic 500 (with an exception thrown behind the scenes)
- Validation added to prevent a user from querying using "$where" statement