feat(Call API): validate the params

The API should only receive caller and callee params and will return HTTP 400 if the request cannot be fulfilled due to bad syntax.
Merge branch 'hardening-the-call-api' into 0.4.0-alpha.2