use express-validate to check params