complete server side validation for step2