api validate helper form

part of check for private layers: IQSS/geoconnect/#56