CLC-4229 - /act_as endpoint should only allow uid's that are valid

https://jira.ets.berkeley.edu/jira/browse/CLC-4229
Better yet, we have a "random_id" method in our SpecHelperModule that would work fine here -- no need for new code so far as I can see.