closes #2860 - add validation from controller/router (#2861)

* closes #2860 - add validation from controller/router instead of within xweb.
allow routers to have misconfigured xweb section for healthchecks

* remove prototyping

* add changelog too