Add some lifecycle validation.

Shouldn't we have a common "validateHTTPGetAction" function - we use this same block in a couple places.