add tests for server-side validations