added validation that properties in req.body exist on entity