rails side validations for private events