Validate input parameters on the backend

[ljukas]

• Make sure no-one enters disabled data, like tshirts and tags
• Make sure data sent is valid data, on the DB side