Relying entirely on client-side validation isn't a great idea.

Also your site doesn't seem to be in production mode, can still see the stack traces on exceptions.