move validation message to server side; add more validation return codes;