Validation should be called first, and then all other actions to allow modify data after validation (for example hash password after validating length. Issue #242