Full serverside validation