Validate HTTP API user input

For example, raft indices must be sane integers.
when will this happen?