controller and route (foem validation)