Web Api Validation Best Practices