validate now returns an array so length is checked