req.body.name = req.body.name.trim(); // bad idea!