validate a web form