request validation