add todos for server side validation