controller data validation