make sure fields exist in ldap record
make sure user fields always valid
validate min/start dates
support different labels/values in lookups via hidden fields