data validation; ZIP code can only have 5 or 9 characters