rigorous input validation of parameters to API endpoints