enforce safety of passed-in request id

https://github.com/rails/rails/blob/4-1-stable/actionpack/lib/action_dispatch/middleware/request_id.rb