CLC-4229 - /act_as endpoint should only allow uid's that are valid

https://jira.ets.berkeley.edu/jira/browse/CLC-4229
@edwlook do we still need the restriction on 9 or less digits? It might be better to just check that it actually exists in our DB view.