Validate HTTP API user input

For example, raft indices must be sane integers.
Log it at ERROR level and move on? Is it the end of the world if the caller gets an error back? I don't know