server validation markup (still incomplete)