Make business logic validation part of models, not controllers
Make business logic validation part of models, not controllers