moved the validation layer from the REST layer to part of the Data layer