Better param handling in Judge::Controller

Avoid NoMethodErrors if a browser misfires and sends an XHR with no
params. All malformed params now result in a NullValidation and
therefore a 200 response with error message array.
Move Validation class into lib

It was in the app/models directory as a part of the autoloaded engine,
but this was causing missing constant errors for <%= reasons %>.