form validation & todo