Implement validation logic

Current thinking is to implement the validation in a stored proc - that way we won't need to pass lists of orders around