validation, generic rest controller