Validate HTTP API user input

For example, raft indices must be sane integers.
goddammit