revisit client side validation

[cburroughs]

Upstream has expressed concern about doing this client side instead of on the server: https://secure.phabricator.com/T8603

[BYK]

Thanks for bringing this up. Responded in that ticket and will update here according to the response.