You will have to validate in the controller because the field slug could be submitted programmatically.
Unnecessary argument
Check of it is not custom before checking for max length
Renaming stuff