add server-side validation responses to the template + messages + minimal front-end validation