server side input validation and tests for that