laravel api validation best practices