putting back server side validation