validate a BST