add server-side validations to conversations controller