Ensure only well-formed requests are POSTed and GETed Probably use Joi (because it's built into Hapi?) This might also be a good time to review error codes/handling in the API