Add server-side validation