date validation regex more restrictive, and added server side check as
well