Validation messages

As reference to #228
this is wrong. This is not the same message than in Authorization, so you should use a different key