validate schema on GET requests