validate objectid in GET