CLC-4229 - /act_as endpoint should only allow uid's that are valid

https://jira.ets.berkeley.edu/jira/browse/CLC-4229
@edwlook  Slicing the left side of random_id produces many more collisions. Can you slice from the right side instead so that there is more variation?