why server side validation is needed