Move validations from controllers to models