server side validation of data request form POSTs