Validation rules and custom controllers