adding serverside validation