fixed validation
post works for sessions and registrations