RequestBody and server validation