more validation

added validation to the Request DTOs, so that it is caught before the
expensive Convert call