Validate HTTP API user input

For example, raft indices must be sane integers.
@jonboulle we should move this to be the first checking?