why server side validation is required