i'm wondering why i have to validate forms on client side while they anyway need a server side (aj