added serverside validation so manager can't remove himself