added express-validation for some api endpoints