Perform comprehensive review of validation

[andylowry]

Need to carefully work through OpenAPI specification looking for all uses of MUST, SHOULD, MUST NOT, SHOULD NOT, REQUIRED, etc. and make sure all are covered by our validations.