Validate slugs and ensure they are lowercase

We should do our best to make sure that the content published through this API conforms to the GOV.UK URL styleguide: https://insidegovuk.blog.gov.uk/url-standards-for-gov-uk/
there's a spec helper called `json_response` that does this for you.