CLC-4229 - /act_as endpoint should only allow uid's that are valid

@edwlook we should probably check whether the actual UID exists in the system before acting as