fix api around request/response validation