I think you validate it to much, its internal app for small group of users. No reason to validate so hard or client want that?