Moving validation into the service layer (creating it where it doesn't e...

...xist); switching to Spring validators.

This is about 2/3rds of the validation changes done. I need to survey the code for still other ways that validation was done, I believe some model objects have validation methods, and there's ad hoc user-submitted data validation in some places where there should only be assertions that the code is wired up correctly. Also we're creating users in 2-3 places and not all of these places where setting the healthDataCode, I have consolidated this, but need to clean up the design.