adding parameter validation to the model (and Yubikey token)