Quality control of coding in a spontaneous reporting database: is it necessary?