Part 2: Validating requests