moved data validation to sqlalchemy models, limited input field max lengths