Added server-side wtforms validation for POST and GET requests
Changed return code to 400 if no course-codes with valid syntax entered.