api: Handle ArrayObject like an array for request validation

Partially fixes #1079