Validation for routes

[petak5]

Validate data in controllers.

[zmazza]

Acknowledged.

this is already done to some point. but we need to write some more test cases, to show that the restrictions are being enforced going forward.