added some string length bounds on request parameters