validate expiration and policy for HTML posts.