only validate related objects on create
it would be extremely unlikely someone would accidentally remove the related object.
validating only on :create improves the performance of updates.