server side validator