expense: validation