Fix PUT /apps/:id validation