we validate parameters and not form data