fixes #1: form value validation