actually leave all of the client logic to validation unless you absolutely can't do it serverside