validate params on post api; refs #1