say no to duplicating server side and client side validation