update app.js to uncomment validation logic