validations to prevent non-hackers from screwing up the form submit