client side validation against querying oneself