Express-api validation middleware