implementing data validator. works great: removes extra data, validates/coerces existing data, and makes sure required fields exist.
updating validator to treat nonexistent entries a bit better (user login was broken)