Move validations from controller to model