Server doesn't check bounds on CHANGESET_REQ arguments

The server wasn't properly checking that the changesets it needed to return for changeset_requests actually existed, causing it to occasionally crash. See issue #477.

This fixes it.