Add note on server side validation.