validation of user input user, server side