Web services input validation problem