Added server-side checking of formations to reinforce client-side Javascript check