server: api move validation