Remove any remaining validation from controllers

[davetosh]

Where controller methods have validation requirements, move out of the controllers and into the model.

[davetosh]

This was a duplicate - the issue still exists.