Add validators to the project, use them in api_accessible to ensure params passed to create don't suck (first draft).