Validate HTTP API user input

For example, raft indices must be sane integers.
No, that's not how the map works. q is `map[string][]string`