validate order at server.