feat(server): add server side validation

#27