Validate trackNumber and duration on POST /listen