Clean up controller specs
Fix " IN " query parameter to work with types other than strings

- Move validation logic into the model when possible