server-side validation when PUTting reviews
validation across the api