add server-side validation control