Add Server-Side Validation

[shamiguel]

• [x] install express validator
• [x] provide "strong params" i.e. destructure req.body to only include the params we want to add/update